Microsoft Windows 2000 đang nhanh chóng thay thế Windows NT trong cài đặt máy chủ nội bộ và bên ngoài. Không ai nghi ngờ rằng Windows 2000 sẽ trở thành một trong những hệ điều hành phổ biến nhất (nếu không phải là phổ biến nhất) qua mạng Internet. Rõ ràng là Windows 2000 sẽ được tìm thấy trong truyền thống Windows NT vai trò như tập tin, in ấn, và máy chủ cơ sở dữ liệu để sử dụng nội bộ và máy chủ web và ứng dụng để sử dụng Internet | CHAPTER 17 Windows 2000 Security Issues Copyright 2001 The McGraw-Hill Companies Inc. Click Here for Terms of Use. 321 322 Network Security A Beginner s Guide Microsoft Windows 2000 is rapidly replacing Windows NT in internal and external server installations. There is little doubt that Windows 2000 will become one of the most prevalent if not the most prevalent operating system across the Internet. It is obvious that Windows 2000 will be found in traditional Windows NT roles such as file print and database servers for internal use and Web and application server for Internet use. Additional features such as a telnet server may push Windows 2000 into functions that have been reserved for Unix systems. However it may be used it is clear that Windows 2000 will store and operate on sensitive information. As we did in Chapter 15 we will discuss the basic steps to take during system setup and how to properly manage users within a Windows 2000 domain. Finally we will discuss system management issues from a security perspective. The final section of this chapter will try to identify key indicators that administrators should watch for when looking for potential intrusions. SETTING UP THE SYSTEM Windows 2000 has added some significant security features over those available under Windows NT. As you will see in the following sections the capabilities of these new tools are quite significant. Unfortunately their use requires a homogenous Windows 2000 environment. When used in mixed Windows 2000 and Windows NT environments the system must default to the weaker Windows NT configurations to allow interoperability. Windows 2000 is not secure straight out of the box although it is better than Windows NT . Given this there are some settings that should be made before the system goes into production that will make the system more secure. The configuration settings are divided into Local Security Policy Settings and System Configuration Settings. Local Security Policy Settings New to .
